Low · 2.7 CVE-2025-49300 EUVD-2025-203620GHSA-x9qg-qg5q-w7wm

WordPress Traveler Option Tree plugin <= 2.8 - Sensitive Data Exposure vulnerability

Published Dec 16, 2025 · Updated Oct 20, 2026 · Assigned by Patchstack

Vendor: shinetheme Product: Traveler Option Tree

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Shinetheme Traveler Option Tree custom-option-tree allows Retrieve Embedded Sensitive Data.This issue affects Traveler Option Tree: from n/a through 2.8.

Affected products

Vendor	Product	Affected	Fixed
Shinetheme	Traveler Option Tree	≤ 2.8	—

References

https://patchstack.com/database/wordpress/plugin/custom-option-tree/vulnerability/wordpress-traveler-option-tree-plugin-2-8-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry